
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier: LhYdFyEV1NEoLen0XesbKekMvlFL/dnAWSOuiK9NSIY=
Subject key identifier: A5:8D:41:19:D9:F5:7C:2B:72:55:BD:ED:C5:7B:14:36:4F:1D:7F:E9
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial: 10CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number: 10A9
Signing time: Thu 08 Oct 2026 17:26:26 +0000
Manifest this update: Thu 08 Oct 2026 17:26:25 +0000
Manifest next update: Thu 15 Oct 2026 17:26:25 +0000
Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: CL1NDkhz1EFRsKeGvJtkL2wXz9XNURBb+MBKXhhmmss=)
2: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: +mWwcwjzpPjSVEv9OnV6PLbugEi6LgvVywkhj6tvDeI=)
3: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nTtKzX6nzx2xavwKMXRS2HOpDCquUtryYE0DdxLYbWk=)
4: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: 6dJXIvYHzCnEDXXSTc0Eos17d9MIrK7ku8xw5lKvqNQ=)
5: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: RVqLv3EtRj5ErqJMVVt6m4xRrHJQaRXNG5AD8ZsgIFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4298 (0x10ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Validity
Not Before: Oct 8 17:26:25 2026 GMT
Not After : Oct 15 17:26:25 2026 GMT
Subject: CN=6ac7d241-9ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:8f:20:af:b0:4e:15:c7:54:98:57:ce:bb:
56:5c:65:e8:b2:43:f4:44:84:2a:b8:3a:86:3c:a6:
07:96:46:fa:e9:c0:b7:46:44:12:34:8e:03:65:40:
ec:11:fb:06:f1:54:f3:a8:6c:6c:de:53:62:d2:21:
f7:1b:6e:82:9a:87:33:79:fc:3d:d2:f0:f6:2b:d4:
c7:22:67:bd:86:b2:9f:c2:d0:f2:70:55:aa:84:87:
30:cf:d0:b8:dc:18:78:ae:e7:27:a0:cd:19:3e:e1:
a8:93:7f:ea:9c:b6:7d:15:15:65:2f:fc:99:fc:70:
17:11:63:df:db:eb:01:16:92:e4:2b:8e:14:49:a7:
36:53:be:b9:b2:63:9f:b9:63:7c:dc:d2:f5:23:87:
45:12:b3:6a:3f:cc:a2:bb:d9:f3:82:bb:8e:2c:48:
55:bf:b2:90:f7:22:9c:2c:ec:d2:97:fe:55:8c:3f:
b2:67:ca:0c:b8:ad:23:aa:05:42:52:db:58:80:15:
e6:0c:45:fb:7e:5f:20:6b:0d:9f:4d:00:03:fe:a3:
6d:26:a1:a1:d1:5d:40:de:62:dc:91:c4:b3:8c:ba:
95:66:ac:ab:20:3c:bb:e1:1e:ab:0c:7d:8c:7c:12:
7b:b7:f8:bf:a6:87:8a:16:15:9c:d5:5f:5f:96:08:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:41:19:D9:F5:7C:2B:72:55:BD:ED:C5:7B:14:36:4F:1D:7F:E9
X509v3 Authority Key Identifier:
keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:a8:3b:a3:92:e5:ed:a1:b8:ce:dc:5b:14:18:45:c8:63:b4:
7f:48:75:d8:41:b5:a1:88:a7:93:4d:67:83:4e:ac:93:c2:79:
79:e6:27:0f:71:bf:3d:59:d1:90:6e:7f:c9:50:d1:b8:b6:4f:
30:d3:3f:d9:01:b8:ff:c5:a8:65:1f:96:2a:c3:8f:b7:6f:72:
1e:b3:11:13:67:40:5a:c9:c2:e3:7c:7c:5b:ab:6c:e4:5b:35:
8d:68:29:73:9a:46:e3:5d:b8:be:ec:0b:4c:86:6e:02:f0:22:
55:11:ef:37:0b:5a:1d:79:c2:fb:2f:f7:62:29:2a:c4:c9:aa:
21:bb:49:92:16:d1:d7:1d:db:8b:fe:ca:40:c3:03:52:88:85:
9c:bc:90:35:0e:c1:6d:bc:10:23:06:cc:79:24:ce:e1:01:21:
c2:95:d0:fc:45:1f:33:f3:f7:c8:01:4b:e6:42:80:a6:23:1f:
1c:c7:da:97:c5:d8:bb:46:0d:75:01:97:5a:a9:79:ac:96:72:
3d:bd:ef:1f:77:b4:f4:ac:3e:11:be:e6:8f:39:a0:bc:72:28:
86:eb:15:c6:07:07:be:87:c2:62:9e:ab:09:1e:c9:12:97:e3:
29:65:ce:89:13:f1:63:98:9c:55:da:1e:ca:52:12:f1:f5:fe:
99:d6:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:05:40 2026 by rpki-client